CVE-2002-1616

Public PoC / Exploit (1)

Exploit-DBTru64 5 - 'su' Env Local Stack Overflow

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.

Affected Products (5)

hp · tru64vulnerable

References (20)

http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html

http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html

http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_su.txt

Exploit

http://www.kb.cert.org/vuls/id/137555

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/177067

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/193347

PatchUS Government Resource

http://www.kb.cert.org/vuls/id/671627

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/864083

US Government Resource

http://www.securityfocus.com/archive/1/290115

Vendor Advisory

http://www.securityfocus.com/bid/5379

Vendor Advisory

http://www.securityfocus.com/bid/5380

Patch

http://www.securityfocus.com/bid/5381

Patch

http://www.securityfocus.com/bid/5382

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/10614

https://exchange.xforce.ibmcloud.com/vulnerabilities/11620

http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html